Blog Home

Identity Security in Production

5 Strategies to Manage Risk and Resist Cyberattacks in the Entertainment Industry
October 13, 2021
Identity Security Film Production

As the digital sphere expands and modern technology continues to advance, cybersecurity leaders recognize the importance of protecting identities. Identity security is essential to manage all organizational user and system information safely. Within the entertainment industry, lack of identity strategy can pose a large threat to productions if not properly secured. Using a strong identity strategy can enable productions to take advantage of a digital strategy while incorporating strong security measures.

Identity protection essentially amounts to the act of identifying someone logging in to a system, ensuring they are who they say they are, limiting them to only what they need to perform their roles and, most importantly, protecting the system from unwanted access. However, in the age of advanced cyberattacks, or any attempt to gain unauthorized access to data with malice, cybercriminals are privy to the knowledge that attacking identities is far easier than trying to break into websites or other systems directly. The simple mantra for these hackers is to take the path of least resistance to be successful.

An example that illustrates this strategy is the prevalence of phishing emails and their success rates. Phishing consists of cybercriminals sending fraudulent emails, allegedly from reputable companies, in the hopes of gaining access to private personal data, including passwords and credit card numbers. According to the 2020 FBI Internet Crime Report, not only is phishing the most common type of cybercrime but the click through rate of these attacks are as high as 35%! Simply put, an attacker can organize a phishing campaign with little effort and get approximately ⅓ of all people to click on the fraudulent link. This type of ransomware alone accounts for adjusted losses of over $54 million. In the past, the costs of broad-scale phishing campaigns were substantially higher due to the cost of access to servers, internet services, and data such as email lists. However, that dynamic has changed drastically in 2021. This is largely due to the increasing use of cloud-based systems, the prospect of global reach, and the broad scale of compromised email lists and other data. The accessibility and widespread use of technology today has led to high success rates, ease of use, and low costs of attack for criminals online; now that’s a recipe for disaster!

The simple mantra for these hackers is to take the path of least resistance to be successful.

In 2020, the entertainment and production industry began a rapid adoption of digital tools and processes beneficial to the trade. However, while this accelerated move to adopt digital solutions was advantageous to the industry, it also created critical new risks to consider, specifically regarding identity protection.

Let’s review 5 strategies to manage identity risk within the entertainment industry:

1. Simplicity of Access

Studios, production offices, and sets are fast-paced environments, therefore, simplifying the complexity of access management is paramount to success. While facilitating this access, it is equally important to ensure strong security is applied, ideally involving simple user interaction but with advanced security controls applied. In this technological age, a username and password are not enough to protect sensitive data. Even longer or more complicated passwords can lack the type of protection needed in today’s risk landscape.

Solution: Utilize enterprise products and services that have integrated identity platforms, which are valuable for managing the identities of users and devices in a centralized fashion. For example, any multi-factor authentication (MFA) support, requiring several verification factors to gain access to private data, is an excellent step in the right direction! This identity service offers easier access to systems for users, while leveraging secure protocols and maintaining a shielded profile throughout. At Entertainment Partners, we leverage an advanced security platform that allows employees to gain access to information efficiently, while simultaneously offering strong security protocols, ensuring the protection of private data.

2. Content Security

It’s no secret that productions are intent on protecting their content, and identity protections are a key linchpin in a production’s cybersecurity strategy. However, it’s important to keep in mind that solid identity protection does not stop at “the front door” of a system. Rather, it is pervasive and consistent through the lifecycle of products and services.

Solution: Advanced identity protections must include protecting data both at rest and in transit. This means identities are bound in the data within the systems themselves, ensuring the secure transport of information as it moves in and out of these systems. Here at EP, we have implemented advanced encryption protocols and systems that tie a user’s identity to the access and data storage itself, combining a triad of identity protections. This acts as a multifaceted way to protect sensitive data and production content.

Advanced identity protections must include protecting data both at rest and in transit.

3. Managing Cost

As more and more businesses start their digital transformations, it is costly from an onboarding perspective as well as an operational standpoint. Production staff are often expected to release quality content to the public quickly, which now generally involves the use of upgraded digital tools. However, while the entertainment industry increases its use of technology, it is critical to shield identities throughout or productions can be delayed substantially. Furthermore, these productions can be delayed if operational use is arduous on a day-to-day basis, increasing costs overall.

Solution: Partner with a provider that offers digital onboarding tools as a central part of the production ecosystem. Suppose a provider offers some digital tools, but fails to offer digital onboarding. The entire process is not only more difficult but also becomes significantly more prone to identity breaches! Physical items, such as paper records, have high maintenance costs and are much more difficult to keep secure. With Entertainment Partners, production workers can utilize a single identity to access end-to-end onboarding capabilities, time management, employee reporting, and more! This ensures identity protection while keeping operational costs low throughout.

4. Governance and Compliance

The production industry operates globally, requires contractual obligations to support services such as unions and, in many cases, must meet strict privacy and security requirements depending on location. In order to meet these governance and compliance expectations, it is essential to employ proper identity protection strategies.

Solution: Choose a provider that has clearly demonstrated their commitment to global security and privacy frameworks, such as ISO 27001, SOC1, and SOC2. These valuable auditing procedures ensure that service providers securely manage data, which ultimately protects the interests of any organization and the privacy of its clients. At EP, we have long demonstrated our commitment to security through years of being ISO 27001 certified, as well as years of SOC1 and SOC2 compliance.

5. Supply Chain Risk-Management

The digital supply chain in the entertainment industry is vast and interconnected. Productions, specifically, rely on a number of suppliers to provide all of the tools and services necessary to produce content successfully. Supply chain security risks are an increasing threat to the industry due to varied levels of immaturity and a lack of investment in the solution to these exposures.

Solution: Execute a vendor risk management (VRM) strategy, prior to engaging with a new supplier. Ideally automated and typically sent through detailed security questionnaires, a VRM strategy should include a process of assessing the provider on their overall security fitness. Additional validation may lead to supplementary security tests, including penetration testing to detect any hidden system flaws and evaluate the security of the IT infrastructure. It is vital that during this assessment process, proper due diligence is completed using qualified security personnel to gauge supplier response and review evidence of performance. While enabling the VRM process requires additional effort by the company, it is an effective way to bypass immature suppliers and ensure the long-term welfare of productions. Entertainment Partners continues to promote security maturity through our commitment to standards and certifications, as well as our detailed and secure engagements with customers and internal suppliers.

Fast changes in technology and increasingly common cyberattacks have made advanced identity protection and cybersecurity essential to any industry. The production industry has an especially high stake in protecting this sensitive data, personal information, and content. It is imperative to consider strategies to minimize these security-risks to properly protect your business and your people! While implementing these identity protection procedures may demand supplementary effort, the benefit and profitability of proper cybersecurity is undeniably worthwhile for any company.

Topic: Security

Related Content


Why Accurate Payroll Tax Withholding Matters to Film Budgets

Wendy Black, EP’s Vice President of Incentive Operations, shares tips for ensuring your production...
Best Practices for Year-End Payroll Cleanup-Panelists-sq

Best Practices for Year-End Payroll Cleanup

Payroll tax expert Becky Harshberger shares best practices to help production accounting teams prepare for...
john hadity-beginners guide to hybrid film financing

The Beginner's Guide to Hybrid Film Financing

How to successfully navigate working with foundations and investors to finance your next social-impact...
John Hadity-Sandra Schulberg-Hybrid Financing Master Series

Film Financing Explained: Hybrid Financing

Sandra Schulberg joins John Hadity for a spirited discussion on Hybrid Financing and how filmmakers can...
Master Series Thumbnail-Best practices for accurate payroll tax withholding

Best Practices for Accurate Incentive Payroll Tax Withholding

Learn how payroll tax withholding impacts a production incentive or film tax credit, and how productions...

Spotlight: Martin Mazor, SVP, Infrastructure & Security

Meet the industry-veteran leading EP's dedicated security team
5 top payroll tax errors-Becky Harshberger

5 Top Payroll Tax Errors and How to Prevent Them

Production payroll can be a daunting task, but it doesn’t have to be! Payroll Tax expert Becky Harshberger...

Film Financing Explained: Soft Money Financing

Vivian Hua joins our panel of financing and incentive experts to discuss funding film and television...
Canadian flag

5 Things to Know Before Working in Canada

Prepare for your next job in Canada with this checklist of payroll considerations
Topic: Canada
 John Hadity-Guide to Soft Money Financing-sq

The Beginner’s Guide to Soft Money Financing

How filmmakers can capitalize on incentives, film funds, and more to finance their next project

5 Things to Know Before Relocating for Your Next Job

What production workers need to consider before moving to a new state
Equity Financing Panel-thumbnail

Film Financing Explained: Equity Financing

James Schamus and Michael Helfant join our panel to share expert advice on funding film and television...

The Beginner’s Guide to Equity Financing

Expert advice to help producers secure funding for their next project

Meet the Production Accountant

From budgeting, to billing, to payroll, the financial powerhouse behind every production

Meet The Costume Designer

The artist behind a character's signature style

Profiles in Leadership: Martin Mazor, SVP and CISO, Entertainment Partners

Why Identity is at the Core of Every New Security and Business Initiative

The Beginner's Guide to Production Incentives

EP helps filmmakers navigate the complex world of film and television incentives

Kickstart Your Production Career with the EP Academy

From Production Accounting basics to technology certifications, EP’s online courses offer one-of-a-kind...

The Psychology of Terror

How our deepest personal fears inspire cinematic monster makers Todd Masters and Steve Wang

Mission: NOT Impossible

Production incentives give producers options, increase infrastructure development and jobs promoting...
Christine Davila, Jairo Alvarado, Sonia Gambaro

Authentic Latinx Storytelling Starts with Inclusion

Christine Dávila, Jairo Alvarado, and Sonia Gambaro work to amplify the talents of underrepresented...

Streamers and the Changing Landscape of Film Distribution

Director/Producer Daniel Farrands on strategies for success in the time of VOD

Meet the Paymasters

The hard-working payroll professionals behind Hollywood's paychecks

How to solve a compounding problem?

The perennial shortage of production accountants has been made worse by the competition for resources, but...

New Terms Under Return-To-Work Agreement

RTW extension includes new two-part delineation, and the role of the vaccine
Topic: Legal
 Adjusting the W4-Becky Harshberger-Sq

How to Adjust Your Tax Withholdings Using the New W-4

Making small adjustments throughout the year can save production workers big at tax time!

Designing for Horror

How filmmakers create fear through visual techniques
Paul Beyers prop master on set

Meet the Prop Master

From script to screen, the creative mind behind the props from film and television
Anthony De La Rosa EP Residuals

The Beginner's Guide to Film and Television Residuals

Important details every producer should know as they budget for their next project
Celebrating Pride Month Panel

Celebrating Pride Month and LGBTQ+ Film and Television

Celebrate Pride month with us as our panel of groundbreaking producers and activists discuss the past,...

Diversifying Hollywood Through Better Hiring and Training

How new legislation and production incentives are promoting diversity and inclusion

Meet the Producer

From concept to the red carpet, the producer is there to keep the production moving forward
Sarah Westman-liu and Jennifer Liscio

Canadian Incentives and Legislation News

The latest updates on incentives, CRA guidance on COVID-19 related costs, and more!
actors on set

Safety on Set Amid Changing COVID-19 Guidelines

What productions should know as they head back to work

Choosing the Right Production Incentives

5 questions to ask when selecting your next incentive-based filming location

Getting a New Start

Davida Lara shares tips on transitioning into your next role

The Path to Better Diversity and Inclusion in Hollywood

How production incentives are helping to promote inclusivity

The Beginner's Guide to Federal Payroll Tax Withholding

Essential information for individual production workers
Spotlight on Georgia Production Panel

Spotlight on Georgia: The Producers' Perspective

A dynamic group of producers, industry experts, and incentive specialists discuss the state of production...

Innovations in Production Incentives

How emerging local initiatives are driving productions to new jurisdictions

Spotlight: Joseph Chianese, Film Production Incentives Expert

Meet the SVP and Practice Leader of Production Incentives at EP

The Beginner's Guide to Production Financing

What to know before starting your next film or television project

Winning Payroll Solutions Start with the Right Team

Davida Lara on why the people who make up a payroll team are critical to delivering results
Producing through COVID women producers panel

Producing Through COVID-19: A Discussion with Six Prominent Women Producers

Stories of navigating the entertainment industry and producing during a pandemic
Pantea Ahmadi and Joe Scudiero

SB 973's Impact on the Entertainment Industry

How California’s new pay data reporting legislation, SB 973, applys to the entertainment industry
Topic: Legal

SB 973, California Pay Data Reporting Law FAQs

The new pay data reporting law and its impact on the entertainment industry

Payroll Tax Changes and the New Form 1099NEC

What you need to know before filing for the 2020 tax season

Spotlight: Becky Harshberger, VP & Practice Leader of Payroll Tax

Meet the entertainment industry’s foremost expert on Payroll Tax

Why Payroll is 'Sexy'

EP EVP of Payroll, Davida Lara, explains her passion for the industry
Pantea Ahmadi and Alan Wu

California & New York Employment and Privacy Legislation Changes in 2021

EP's Legal team breaks down important legislation changes impacting production hubs
Topic: Legal
California Privacy Rights and Enforcement Act Amends California Privacy Protection Act

California Privacy Rights and Enforcement Act Amends California Privacy Protection Act

California voters passed the California Privacy Rights and Enforcement Act (CPRA), which amends and...
Melissa Lintinger NBCU

A Conversation with Melissa Lintinger, SVP of Production Finance, NBCU

How television crews are getting back to work during COVID-19
Becky Harshberger and Neddy Alonso

Preparing for 2021 Payroll Tax Changes and the New Form 1099-NEC

EP's payroll tax experts walk through the 1099-NEC and other important changes
Paul Steinke

A Conversation with Paul Steinke, SVP Production Finance at Walt Disney Studios

Mark Goldstein and Paul Steinke discuss the state of the industry, emerging technology and more!
Christy Guilbault, Annette Martinez-Novo

EP Cares — The Industry's Leading Health Insurance Program

Learn how to get your production company on the industry’s leading health insurance program for non-union...
Master Series Return to Work Agreement Panel

Understanding the COVID-19 Return-To-Work Labor Agreement

EP's Legal experts explain the entertainment industry's safety guidelines
Subscribe now

Be an industry insider with EP's
newsletters and alerts

LegalPrivacy NoticeSecurity